CVE-2023-4929

MEDIUM

NPort 5000 Series - Improper Validation

Title source: llm

Description

All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. This vulnerability results from insufficient checks on firmware updates or upgrades, potentially allowing malicious users to manipulate the firmware and gain control of devices.

References (1)

[Vendor Advisory] https://www.moxa.com/en/support/product-support/security-advisory/mpsa-233328-nport-5000-series-firmware-improper-validation-of-integrity-check-vulnerability

Scores

CVSS v3 6.5

EPSS 0.0004

EPSS Percentile 12.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Classification

CWE

CWE-354

Status published

Affected Products (50)

moxa/nport_5150ai-m12-ct-t_firmware < 1.5

moxa/nport_5250ai-m12-ct-t_firmware < 1.5

moxa/nport_5150ai-m12-t_firmware < 1.5

moxa/nport_5250ai-m12-t_firmware < 1.5

moxa/nport_5450ai-m12-ct-t_firmware < 1.5

moxa/nport_5150ai-m12_firmware < 1.5

moxa/nport_5250ai-m12_firmware < 1.5

moxa/nport_5150ai-m12-ct_firmware < 1.5

moxa/nport_5250ai-m12-ct_firmware < 1.5

moxa/nport_5450ai-m12-t_firmware < 1.5

moxa/nport_5450ai-m12_firmware < 1.5

moxa/nport_5450ai-m12-ct_firmware < 1.5

moxa/nport_5130_firmware < 3.10

moxa/nport_5150_firmware < 3.10

moxa/nport_5110_firmware < 2.10

... and 35 more

Timeline

Published Oct 03, 2023

Tracked Since Feb 18, 2026